please sync monkeysphere 0.26 from debian unstable

[dkg]

Binary package hint: monkeysphere

I noticed that monkeysphere 0.22 is in the ubuntu archive for Jaunty. If it's not too late, please sync 0.24 from debian unstable, as it resolves a number of bugs (including one mostly-theoretical security concern), removes some flakey dependencies, and enables important features. It also changes the administrative interface to make it more intuitive; the 0.22 administrative interface is discouraged by upstream.

thanks!

UPDATE: please sync 0.26, not 0.24!

[Micah Anderson (micah-debian)]

Please sync 0.24 for jaunty, its significantly better than 0.22 in a number of important ways. In fact, if you dont sync 0.24 from Debian (its in testing/squeeze now too), it might be better to remove 0.22 completely from jaunty. However, I think the best move would be to include 0.24, as its primarily a bug fix and interface release which has proven to be much more stable.

[dkg (dkg0)]

Hey folks -- please update monkeysphere to 0.24! It's bad enough that Jaunty released with 0.22, but now Karmic has the same package present. Please do not release Karmic with monkeysphere 0.22.

Thanks,

  --dkg

[Jameson Rollins (drgraefy)]

I strongly agree as well. monkeysphere 0.22 should not be released with any Ubuntu version. Please use 0.24 or above.

[dkg (dkg0)]

Please sync with 0.25 before the release of karmic! It would really be a shame if karmic released with monkeysphere 0.22.

[dkg (dkg0)]

To be clear, I'm requesting a sync of 0.25-1 from the main component of debian unstable.

[Ilya Barygin (randomaction)]

It FTBFS, same problem as with 0.24-1 currently in karmic:

##################################################
### ssh connection test for success...
##### starting ssh server...
##### starting ssh client...
ms: Launching "/tmp/buildd/monkeysphere-0.25/tests/tmp/monkeyspheretest.XVpkCxo/testuser/.ssh/askpass"
ms: (with prompt "Enter passphrase for key Monkeysphere Test Suite Test User (DO NOT USE!!!) <email address hidden>: ")
gpg: about to export an unprotected subkey
Identity added: Monkeysphere Test Suite Test User (DO NOT USE!!!) <email address hidden> (Monkeysphere Test Suite Test User (DO NOT USE!!!) <email address hidden>)
debug1: Executing proxy command: exec /tmp/buildd/monkeysphere-0.25/tests/tmp/monkeyspheretest.XVpkCxo/testuser/.ssh/proxy-command testhost 22 /tmp/buildd/monkeysphere-0.25/tests/tmp/monkeyspheretest.XVpkCxo/ssh-socket

debug1: permanently_drop_suid: 1234

/tmp/buildd/monkeysphere-0.25/tests/../src/monkeysphere
debug1: identity file /tmp/buildd/monkeysphere-0.25/tests/tmp/monkeyspheretest.XVpkCxo/testuser/.ssh/no-such-identity type -1

ms: checking path permission '/tmp/buildd/monkeysphere-0.25/tests/tmp/monkeyspheretest.XVpkCxo/testuser/.ssh/known_hosts'...
ms: checking path permission '/tmp/buildd/monkeysphere-0.25/tests/tmp/monkeyspheretest.XVpkCxo/testuser/.ssh'...
ms: checking path permission '/tmp/buildd/monkeysphere-0.25/tests/tmp/monkeyspheretest.XVpkCxo/testuser'...
ms: checking path permission '/tmp/buildd/monkeysphere-0.25/tests/tmp/monkeyspheretest.XVpkCxo'...
ms: checking path permission '/tmp/buildd/monkeysphere-0.25/tests/tmp'...
ms: checking path permission '/tmp/buildd/monkeysphere-0.25/tests'...
ms: checking path permission '/tmp/buildd/monkeysphere-0.25'...
ms: checking path permission '/tmp/buildd'...
ms: checking path permission '/tmp'...
ms: improper group or other writability on path '/tmp':
ms: group: w, other: w
ssh_exchange_identification: Connection closed by remote host

##### ssh connection test FAILED. returned: 255, expected: 0
FAILED!
### removing temp dir...
make[1]: *** [test] Error 1

It's discussed at http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=527765

[Stefan Ebner (sebner)]

Unsubscribing u-u-s.
Please feel free to re-subscribe when the package builds and is ready to be synced.

[dkg (dkg0)]

The package builds and tests fine as long as it is not built under a path with loose permissions, due to sshd limitations. :/

should we disable the tests during build for ubuntu? That would mean that ubuntu users wouldn't get the same assurance that the package works as intended.

[dkg (dkg0)]

0.26-1 (now in debian unstable main) should be able to be built under pbuilder (or from within a directory like /tmp with loose permissions).

This is due to a new STRICT_MODES feature in monkeysphere, and a revised test suite which determines the permissions of the parent directory, and selectively disables tests that would not function in a loosely-permissioned directory anyway.

please sync monkeysphere 0.26-1 from debian unstable main. Thanks!

[Stefan Ebner (sebner)]

Sync request ACKed.

[Steve Langasek (vorlon)]

[Updating] monkeysphere (0.24-1 [Ubuntu] < 0.25-1 [Debian])
 * Trying to add monkeysphere...
  - <monkeysphere_0.25-1.diff.gz: downloading from http://ftp.debian.org/debian/>
  - <monkeysphere_0.25.orig.tar.gz: downloading from http://ftp.debian.org/debian/>
  - <monkeysphere_0.25-1.dsc: downloading from http://ftp.debian.org/debian/>
I: monkeysphere [universe] -> monkeysphere_0.22-1 [universe].

[dkg (dkg0)]

It appears that 0.25-1 was synced, but it will have the same problem with rebuilding under /tmp (and thus with pbuilder) that Ilya points out in #6, above. 0.26-1 was placed in unstable a few days ago, and is the specific requested version in this bug report:

  http://packages.qa.debian.org/m/monkeysphere/news/20090801T223532Z.html
  http://packages.debian.org/source/unstable/monkeysphere

[dkg (dkg0)]

Changing from "Fix Released" back to "Confirmed" because syncing 0.25-1 doesn't resolve the potential FTBFS that Ilya raises, while 0.26-1 should have a cleverer test suite that can complete without failure even when running under /tmp or other directories with loose permissions. (it does this by selectively disabling tests when run under a too-loose directory)

[Micah Anderson (micah-debian)]

It looks like 0.25-1 was sync'd when the request was for 0.26-1, please sync 0.26-1 instead. Thanks!

[Steve Langasek (vorlon)]

[Updating] monkeysphere (0.25-1 [Ubuntu] < 0.26-1 [Debian])
 * Trying to add monkeysphere...
  - <monkeysphere_0.26-1.diff.gz: downloading from http://ftp.debian.org/debian/>
  - <monkeysphere_0.26.orig.tar.gz: downloading from http://ftp.debian.org/debian/>
  - <monkeysphere_0.26-1.dsc: downloading from http://ftp.debian.org/debian/>
I: monkeysphere [universe] -> monkeysphere_0.22-1 [universe].